122
Command Mode:
Admin Mode
Parameter:
None
Usage Guide:
Enable the debugging messages to check the negotiation
process of the protocol which can help detecting the failure.
Example:
Enable the debugging messages of the protocol
Switch#debug tacacs-server
2.9.4 Typical Scenarios
Fig 2-6 TACACS Configuration
A computer connects to a switch, of which the IP address is 10.1.1.2 and connected
with a authentication server; IP address of the server is 10.1.1.3 and the
authentication port is defaulted at 49, telnet log on authentication of the switch
Switch(Config)#interface vlan 1
Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0
Switch(Config-if-vlan1)#exit
Switch(Config)#tacacs-server authentication host 10.1.1.3
Switch(Config)#tacacs-server key test
Switch(Config)#authentication login tacacs local
2.9.5 Troubleshooting
In configuring and using , the may fail to authentication due
to reasons such as physical connection failure or wrong configurations. The user should
ensure the following:
First good condition of the server physical connection
Second all interface and link protocols are in the UP state (use “show interface”
command)
Then ensure the key configured on the switch is in accordance with the
one configured on server
10.1.1.1
Switch
10.1.1.2
Tacacs Server
10.1.1.3
